Re: Duplicate dynamically an OU with another RDN ?

To: Dan White <dwhite@olp.net>

Subject: Re: Duplicate dynamically an OU with another RDN ?

From: ClÃment OUDOT <clem.oudot@gmail.com>

Date: Wed, 30 Apr 2014 08:28:31 +0200

Cc: Sylvain <debian.roxx@gmail.com>, "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=dDIQlPVKV83O5tE8hH8TMWFPjzk9zbyZlSmXFtGjiLM=; b=WSZTflojPUstGATmclZE0fG6fHKtMk9SPmisEH89DPDNjlpn+qm/X7iJ6cZTirkB0p 1YiIxYW766THban3hh3mx8V84qI+Ml9Jrtc9/vQ/W7uVM/s+/zLUarBFQXWBOZp/siFs o3EuZPtCOA/AH/FrIuXIlGHw+Ti8iOco+jdyL9OB50PWuKswTL6OoCxT27WASpNcincx E36LdKbJjSMzSUZzCjV3JSml3cyRpunEIEVUzm9nfWj7dqgt644Ph1l/p9g6ITHFcXsA fiYjbYkbPZg1xfjYuqAEnBV3g77aDNj96x9+SosJneBtS0rZyc3B84NyMUJEgvENCXH6 gSEw==

In-reply-to: <20140429133219.GA6174@dan.olp.net>

References: <CALhNj+R2hz+CY5CX+kaLSHS=xyLgQmqXkUyRspEnkmsfm+MAUQ@mail.gmail.com> <20140429133219.GA6174@dan.olp.net>

2014-04-29 15:32 GMT+02:00 Dan White <dwhite@olp.net>:

On 04/29/14Â14:57Â+0200, Sylvain wrote:

Hi !

I have a branch "ou=people" where RDN are in the form "X1234" and NEVER
change for one people.
Ex. : uid=X1234,ou=people,dc=example,dc=org

In this node, I have the login under "eduPersonPrincipalName" attribute
which MAY change.

Some applications doesn't allow us to define which login to use and so take
"uid" attribute by default, not so cool.

Is there any possibility in OpenLDAP to duplicate dynamically an OU with
another RDN to have for example :
uid=sylvain,ou=peoplebis,dc=example,dc=org ?

The rwm overlay should handle this. Point your broken applications to a
unique suffix (e.g. dc=example,dc=org,dc=brokenapps), which overwrites the
incoming DN to use eduPersonPrincipalName instead of uid. See slapo-rwm(5).

You could also use alias if the application supports them. With LSC (http://lsc-project.org) it is really is to create a synchronization task that will create aliases in a new branch.

ClÃment.